CVE-2024-47123
The goTenna Pro App uses AES CTR type encryption for short, encrypted messages without any additional integrity checking mechanisms. This leaves messages malleable to an attacker that can access the message. It is recommended to continue to use encryption in the app and update to the current release for more secure operations.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6
- CVSS vector
- CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.08%
- CWE
- CWE-353
- Published
- 2024-09-26
- Last modified
- 2026-03-13
Affected products
- goTenna Pro
Weakness type
Related vulnerabilities
- CVE-2026-81049 — Dell ThinOS 10, versions prior to 2605_10.2616, contain a Missing Support for Integrity Check...
- CVE-2026-58224 — Samba: ctdb fails to do integrity checking of received packets
- CVE-2026-17583 — Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check
- CVE-2026-18536 — Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP
- CVE-2026-12705 — Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool
- CVE-2026-48995 — pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile
- CVE-2026-7574 — Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use
- CVE-2026-45787 — electerm's encrypt method not safe enough